$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa File: 6902b34f-447e-3d28-bb42-2d8e55ad7984.roa (raw, json) Hash identifier: IKe5SghGuEQap6MUU5EVg6OXgCYT6XLhG53latvw+uw= Subject key identifier: 9E:CF:53:7E:96:79:FF:4F:8E:DB:97:2B:35:86:2C:4D:0C:21:67:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A282B66C560EE105BBA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 394609 IP address blocks: 66.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:28:2b:66:c5:60:ee:10:5b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ddff12da-6e47-4e57-b2f4-8da5fc1ed1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:97:2b:01:75:b9:ea:35:87:7b:dd:48:0e: 61:4e:7e:97:04:6d:50:98:50:47:30:6e:e5:cf:94: d6:36:52:c7:f7:10:78:f6:2f:fa:09:a7:45:9b:87: df:4e:b9:97:cf:66:d6:ea:86:e8:b3:92:f4:9d:40: 29:f5:74:36:eb:56:cb:4e:21:ae:cd:85:fb:f9:ff: bc:7b:ab:50:75:98:47:05:e8:dd:5a:8c:0f:f6:be: 79:6c:78:c5:11:94:a5:95:f0:c8:dc:f7:1a:90:e1: f2:94:be:1e:98:46:b0:82:89:d0:89:5d:86:d0:32: af:2c:b9:33:f6:f3:17:8e:3a:49:b0:ec:a1:0f:10: 3d:20:aa:32:94:f0:b6:e2:cf:0c:c9:3c:17:e2:0e: eb:f6:04:e4:45:8e:af:d8:2f:d7:64:4d:bd:0a:82: 12:e4:61:75:1e:2d:6b:5f:81:85:64:79:79:99:6e: 13:14:52:0f:d7:f8:82:a7:55:ee:1e:40:24:c6:6f: 54:6b:4e:cb:6d:db:3e:3a:5b:c5:96:a2:2e:f6:a2: 41:ad:b4:3d:ee:ba:2a:c3:56:ca:f2:7d:97:b4:86: 58:84:31:05:d1:11:ca:5e:37:9d:7b:2d:56:0f:65: 2d:26:1d:73:34:74:31:02:2e:60:32:c9:48:30:33: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CF:53:7E:96:79:FF:4F:8E:DB:97:2B:35:86:2C:4D:0C:21:67:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6902b34f-447e-3d28-bb42-2d8e55ad7984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f5:e1:85:7f:05:55:63:02:58:4e:c3:e5:54:33:76:a2:ff: b1:89:0e:a5:9f:d9:97:f6:76:62:cc:1e:cc:fb:3a:2b:72:0f: 86:b1:5a:b4:bf:14:3e:7b:79:de:85:03:9b:0f:54:b5:52:41: 21:cb:e6:2b:53:e5:79:7d:5f:77:e8:d0:7d:5d:27:b6:ca:3d: a4:2d:8a:28:9c:96:5a:67:8d:08:7a:c0:b1:9d:dd:b0:cf:84: ee:98:30:88:3f:7c:51:85:eb:2c:78:18:6e:17:9c:2f:3b:a8: 2d:b0:68:33:cc:31:e7:76:4f:0d:76:73:51:7d:0f:21:90:bc: 2d:b8:d2:5c:aa:4b:cd:15:b0:fb:e3:a9:48:57:b5:cb:53:ee: 5c:2c:ab:05:18:b7:f0:84:73:fb:27:af:ab:be:d1:49:37:e7: 0b:f9:22:37:18:54:27:cb:11:91:22:c0:d8:61:56:78:56:9f: 11:32:c9:27:ef:a9:12:54:c2:00:81:4c:b2:15:0d:dc:b5:67: 17:4c:76:8d:4b:48:37:a5:e0:8c:cf:8c:ec:41:e7:fd:4c:97: ea:c9:bf:64:8c:3b:92:7d:e5:96:5e:26:5d:ec:3d:b6:01:6b: 57:ec:66:59:42:b7:ce:c0:13:1e:03:2d:31:13:e1:70:2d:76: 44:66:7b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSigrZsVg7hBbugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGRmZjEyZGEtNmU0Ny00ZTU3LWIyZjQtOGRhNWZjMWVkMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDGXKwF1ueo1h3vdSA5hTn6XBG1QmFBHMG7l z5TWNlLH9xB49i/6CadFm4ffTrmXz2bW6obos5L0nUAp9XQ261bLTiGuzYX7+f+8 e6tQdZhHBejdWowP9r55bHjFEZSllfDI3PcakOHylL4emEawgonQiV2G0DKvLLkz 9vMXjjpJsOyhDxA9IKoylPC24s8MyTwX4g7r9gTkRY6v2C/XZE29CoIS5GF1Hi1r X4GFZHl5mW4TFFIP1/iCp1XuHkAkxm9Ua07Lbds+OlvFlqIu9qJBrbQ97roqw1bK 8n2XtIZYhDEF0RHKXjedey1WD2UtJh1zNHQxAi5gMslIMDME/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7PU36Wef9PjtuXKzWGLE0MIWepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjkwMmIzNGYtNDQ3ZS0z ZDI4LWJiNDItMmQ4ZTU1YWQ3OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz14YV/BVVjAlhOw+VUM3ai/7GJDqWf2Zf2dmLMHsz7OityD4axWrS/ FD57ed6FA5sPVLVSQSHL5itT5Xl9X3fo0H1dJ7bKPaQtiiicllpnjQh6wLGd3bDP hO6YMIg/fFGF6yx4GG4XnC87qC2waDPMMed2Tw12c1F9DyGQvC240lyqS80VsPvj qUhXtctT7lwsqwUYt/CEc/snr6u+0Uk35wv5IjcYVCfLEZEiwNhhVnhWnxEyySfv qRJUwgCBTLIVDdy1ZxdMdo1LSDel4IzPjOxB5/1Ml+rJv2SMO5J95ZZeJl3sPbYB a1fsZllCt87AEx4DLTET4XAtdkRme5o= -----END CERTIFICATE-----Generated at Sat May 10 13:01:20 2025 by rpki-client